2+ RADIUS Jobs in India

Job Title: AAA Implementation Engineer

Location: REMOTE

Duration: 12+ months

The AAA Implementation Engineer is responsible for delivering technical implementation services that support the evolution and ongoing maintenance of the AAA infrastructure. This includes involvement in a variety of projects, system upgrades, service and feature enhancements, as well as remediation and break-fix activities. All work must adhere to the organization’s current architectural standards, technology roadmaps, governance, and change management policies. While the primary focus is on implementation and validation engineering, the role also requires a strong understanding of design engineering, AAA policies, security posture, protocols, and cluster deployment and maintenance. The AAA Implementation Engineer will collaborate directly with both internal and external stakeholders—including Architecture, Product Engineering, Design/Implementation Engineering, Change Management, Service and Product Management, Finance, Business Management, and Operations teams—as well as various levels of senior management.

Key Responsibilities:

•     Attend Project Meetings as needed. 

•     Creates Change documents and changes

•     Scheduling of the changes with the assigned engineer

•     Ensures change documents are peer reviewed are approved

•     Representing change records (CRQs) on various calls

•     Representing on regional pre-CAB Weekly 

•     Socializing changes to the other peer teams regionally so they can represent changes in region. 

•     Coordinates with other teams for change knowledge transfer

•     Following up with Testers / Testing Coordination for all Changes

•     Ensuring Peer Reviews are attached to CRQs / Chasing Approvals

•     Attends various change review calls including AAA weekly internal change calls – weekly

•     Reviews test plans and results, ability to assist in driving to root cause.

•     Collaborate with other internal/external Bank teams such as Operations, Engineering, and requestors on core design requirements/standards and risk assessment.

•     Leverage designated tools and resources to create NCDs that will drive implementation during a pre-approved change window as necessary.

•     Ensure initiatives\changes are well defined with success criteria, ownership, and realistic but firm schedules.

•     Rehearse changes in the lab.

•     Works during weekends to implement changes. Low risk changes can be performed during the week. 

•     Ensures no risks are associated with the change.

•     Ensure changes are user acceptance tested and authentication logs are successful after post implementation.

•     Building, updating and sending Change Communication templates for weekend changes

•     Works with release managers to create changes.

•     Update schedule as changes is completed and new work orders are added.

•     Coordinates with vendors during changes if devices need to be swapped or any type of datacenter local onsite support is needed.

•     Create work orders and other requests to engage Blackbox and device, firewall and IP services updates

•     Validates changes via working with users as part of user acceptance testing, creation and implementation of test plans (automated and manual), verify logs and test results. 

Preferred Experience and Attributes

•     Strong subject matter expertise across various enterprise identity authentication technologies ranging from AAA (RADIUS/TACACS), 802.1X technologies (Wired/Wireless), RSA and token-based systems.

• Experience with Aruba ClearPass Policy Server or Cisco Identity Services Engine (ISE) is required.

• Experience with Network Access Control (NAC) 802.1X for Wired and Wireless networks is required.

• Experience working with SSL Certificate Authorities and certificate management.

• Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and authorization protocols, cryptography, application security, load balancing.

• Experience with tools such as Splunk, Excel, ideally experience in automation.

• Expert understanding of network protocols TCP/IP, HTTP, HTTPS, SSL, TLS, 802.1.X, etc.

• Experience with testing and change validation, root cause analysis, risk mitigation, security assessments, analysis of security threats, trends and architectural preferred.

• Experience with Remote Access (VPN posture) is preferred.

• Experience with Secure Cloud Analytics (Stealthwatch) is preferred.

•     Project Management, ITSM 

•     Experience with Change Management and CAB processes and procedures.

•     Focused on execution, delivery, and commitment to dates.  Ability to work in a high-paced environment. Can manage risk - is a good decision maker. Understands the big picture; ability to relate to the firm’s strategy and actions and how they support our business results.

•     Leadership: be a self-starter, self-directed and show initiative.

•     Demonstrates ownership: Is accountable and influential/can hold others accountable (professionally).

•     Strong written and verbal communications skills. Ability to communicate and influence upward as well as laterally. 

•     Organized and detail oriented.

•     Familiarity with working in regulated and/or large global enterprises is a plus

Requirements:

•     Bachelor’s degree in engineering, computer science, business, finance or related field/technical training. Post Graduate Degree a plus

•     Must have strong analytical skills.

•     Minimum of 8-12 years’ experience required in technical role supporting network project(s)/program(s).

•     Experience with: Clearpass, Stealthwatch, ICE, AAA, SPLUNK, load balancing, captive portals, NA3RC, automation, network configuration, certificates, cluster build, upgrade and configuration.  

•     Working knowledge of Excel and MS Project 

•     Financial services (Insurance, Banking, Investment banking), is a plus.

•     Ability to be nimble and flexible; prioritize workload, proactively react to issues and consistently react to shifting deadlines.  

•     Ability to work weekends (as needed) for migration work

About us:

Arista Networks was founded to pioneer and deliver software driven cloud networking solutions for large datacenter storage and computing environments. Arista's award-winning platforms, ranging in Ethernet speeds from 10 to 400 gigabits per second, redefine scalability, agility and resilience. Arista has shipped more than 20 million cloud networking ports worldwide with CloudVision and EOS, an advanced network operating system. Committed to open standards, Arista is a founding member of the 25/50GbE consortium. Arista Networks products are available worldwide directly and through partners.

About this role:

• You will be working with the WiFi team at Arista, developing cutting edge and next generation WiFi solutions in a fast-paced environment. The WiFi team is responsible for the end to end development of the Cloud managed WiFi product portfolio of Arista. This specific position is for the WiFi AccessPoint team.
• As a core member of the AccessPoint team, you will be working closely with relevant teams to understand product requirements, design the solution, build the software and deliver it for final validation and customer deployment.
• You will also keep track of new and emerging technologies and their impact on Arista products, come up with new and innovative ideas to improve and differentiate the product and help Arista become a leading player in the Campus space.
• You will work closely with sales and support teams to push new solutions, understand customer needs and pain points and help resolve escalations.
• You will not be limited to a single aspect of the product, it will be broad encompassing many different aspects including but not limited to developing new Access Points, designing and implementing new features, tracking new technologies and working closely with the sales and customer teams.

Requirements:

• Strong engineering and Computer Science fundamentals

• Expected to have a strong background in software development and good understanding of systems and networking areas with the knowledge of the WiFi area as an added bonus.

• Minimum 4+ years of relevant experience

• Well versed with programming in one of C/C++ languages

• Experience working in a Linux environment, developing applications or Linux drivers

• Proven experience in any of the below:

1. Network device drivers, operating system internals, Kernels, compilers, SOC architecture
2. Experience in developing Wi-Fi features (802.11), WLAN MAC Protocol, system integration, evaluate various performance parameters.
3. User space development for connectivity related products (Wireless Lan access points/ controllers, networking equipment) in one or more of following areas:

• HostAPD, Portal, RADIUS, AAA, Identity and role management, Radsec

• Tunnels, Firewall, Iptables, Flow Classification, QoS, TLS, DTLS Preferred Skills

• Experience with Wi-Fi device drivers on Linux.

• Hands-on experience in working with one or more WIFI chipset platforms

• Good System Level understanding of the Wireless AP functionality

• Experience in developing Wi-Fi features, system integration, evaluate various performance parameters

Resources:

• Arista Cognitive WiFi : https://www.arista.com/en/products/cognitive-wifi https://youtu.be/cT1INdR-xHQ https://www.youtube.com/watch?v=olPkCOT3MdA
• Arista Cognitive WiFi Datasheet: https://www.arista.com/assets/data/pdf/Datasheets/CloudVision-Wifi-Datasheet.pdf
• Arista's Approach to Software with Ken Duda (CTO): https://youtu.be/TU8yNh5JCyw
• Additional information and resources can be found at https://www.arista.com/en/